Picketlink Picketlink
3 CVEs affecting Picketlink Picketlink. Latest disclosed: 2015-08-26. Critical: 0, High: 0.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2015-3158 | | 2015-08-26 | The invokeNextValve function in identity/federation/bindings/tomcat/idp/AbstractIDPValve.java in PicketLink before 2.8.0.Beta1 does not properly check role bas… | |
CVE-2015-6254 | | 2015-08-17 | The (1) Service Provider (SP) and (2) Identity Provider (IdP) in PicketLink before 2.7.0 does not ensure that the Destination attribute in a Response element i… | |
CVE-2015-0277 | | 2015-08-17 | The Service Provider (SP) in PicketLink before 2.7.0 does not ensure that it is a member of an Audience element when an AudienceRestriction is specified, which… |